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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 
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1 )S Responsive to communication(s) filed on 15 February 2001 . 
2a)n This action is FINAL. 2b)S Tliis action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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4) ^ Claim(s) 1-29 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) S Claim(s) 1-29 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) \Z\ Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) n The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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12) n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .0 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-2, 4, 6-8, 12-15, 17-18, and 20 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Carlson et al, hereinafter "Carlson" (US 5/506961) in 
view of Jensenworth et al, hereinafter "Jensenworth", (US 6/2791 1 1 B1 ). 

3. As per clainns 1 7 13 14 17 20, Carlson discloses the "Connection Authorizer for 
controlling access to system resources" invention, which teaches an 
authentication method to get access a set of data locates on the network server 
or storage locations (Col 12 lines 30-40). The programmable workstation (PWS) 
has the Client Connection Manager (CCM) interfacing with the Server 
Connection Manager (SCM) (Data Access Manager) on the server for the 
resource connection (See Fig. 1). The CCM begins the authorization process by 
sending request message to the System Authorizer Mechanism (SAM) or (the 
Control Circuit) (Col 6 lines 5-10). The request message includes the client 
resource ID field, Server resource ID field, information ID field, and access rights 
field (Col 7 line 43 to Col 8 line 5). SAM receives the message request. SAM 
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uses an existing table to verify and identify all the fields in the message and 
locate the requested resource as an authorization process (Col 7 line 43 to Col 8 
line 5). Then, SAM sends SCM a peer to Peer Authorization Message (PTPA) 
(Col 6 lines 1 1-24). After SCM sends back to SAM an Authorization Response 
(AR) message if authenticate (Col 6 lines 24-32). Based on the type of access, 
SAM sends Open Peer to Peer System to lOP message (OPTPSTI) to CCM (Col 
6 line 30). At the same time, SAM sends a copy of the server tokens to all 
servers that have the resource requested (Col 8 lines 15-18). The OPTPSTI 
message includes a server copy token based on the type of access (Col 8 line 
40, 55, and 63), message type field, client resource ID field, server resource ID 
field, server route field, and client access field (Col 10 lines 5-23). CCM uses the 
server copy token to validate the resource requested. The token comprises 
client lOP address (Storage location), client lOP resource, time of day, and 
random value (Col 9 lines 33-35). CCM then bundles the server copy token with 
the Open Peer to Peer lOP to lOP message (OPTPITI) and send back to SCM to 
authorize the data access (Col 6 lines 38-43). Col 6 lines 37 to 59 describe the 
steps taken for a successful/unsuccessful authentication. (Col 6 lines 5-59) 
However, Carlson does not teach the implementation of a first token to get 
access and generate an authorization signal that controls access to the set of 
data based on the first access token and a second access token of the plurality 
of tokens, the second access token associated with the set of storage locations. 
Nevertheless, Jensenworth discloses the "Security Model Using Restricted 
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Tokens" invention, which teaches a method of authenticating a resource access 
on the remote server using the token. The client generates a token and sends it 
to the server for resource access authorization. The server compares the 
received token to the restricted token (Master token) to authorize the access. 
Therefore, it is obvious at the time of the invention for one of ordinary skill in the 
art to incorporate Jensenworth's token authentication method into Cartson's 
invention. As the result, the message in Carlson's invention is the token to 
authenticate with the server to get access authorization to the resource. In 
Carlson's invention, the second token is already taught. 

4. As per claims 3, 9-10, 23, 27, and 29, the rejection of claim 1 is incorporated and 
further Carlson teaches the association, prior to receiving the first access token, 
the second access token with the set of storage locations in response to an initial 
request from the host to store the set of data (Col 8 lines 15-18); and tagging 
each storage location with the second access token (Col 8 lines 15-18). 
However, Carlson does not teach the allocation of the set of storage locations in 
the data storage assembly to receive the set of data in response to the request to 
store the set of data. Nevertheless, Carlson does teach the access privilege of 
the PWS as to read or write from a particular storage device location (Col 8 lines 
1-5). Therefore, it is obvious at the time of the invention was made for one of 
ordinary skill that Carison explicitly teaches the allocation of the set of storage 
locations in the data storage to store data. 
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5. As per claims 5, 11, 16, 19, 22, and 24, Carlson and Jensenworth discloses the 
data storage system of claims 1, 7, 14, 17, 21, and 23, wherein the request is 
one of a read request to read data from at least one of the set of storage 
locations and a write request to write data to at least one of the set of storage 
locations (Col 8 lines 1-5). 

6. As per claims 21 , 25, 26, and 28, claim 1 rejection is incorporated. Further, 
Carlson teaches an input/output controller to the data storage system (Col 1 lines 



7. Any inquiry concerning this communication from the examiner should be directed 
to Linh Son whose telephone number is (703)-305-8914 or Fax to 703-746-9821 . 

8. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor Kim Y. Vu can be reached at (703)-305-4393. The fax numbers for 
this group are (703)-872-9306 (official fax). Any inquiry of general nature or 
relating to the status of this application or proceeding should be directed to the 
group receptionist whose telephone number is (703)-305-9600. 



15-26) 



Conclusion 



Linh LD Son 




Patent Examiner 



